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WHAT IS CLAIMED IS: 

1* v An access control method for controlling an 

execution of an access content accepted from a user, 
the method comprising the steps of: 

accepting an access content representing a 
content \of an access requested by the user; 

requesting an execution of the accepted 
access cofatent by sending the access content along with 
an attribute of the user; and 

executing the requested access content in a 
range that matches the user attribute sent together 
with the access Content/ 

2 . TheN^ce^S/Control method according to claim 

1, wherein a content\pf the user attribute to be 
disclosed is limbed accforxiing to a user attribute 
disclosure policyV 

y 

3. The access control method according to claim 

1, wherein a destination to which the user attribute is 
to be disclosed is limited according to a user 
attribute disclosure policy. 

4. The access Control method according to claim 

2, wherein a destination to which the user attribute is 
to be disclosed is limited according to a user 

\ 

attribute disclosure policy. 

5. An access control system for controlling an 
execution of an access content accepted from a user, 
the system comprising: 

an access request unit to accept an access 
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conteri^ representing a content of an access requested 
by the Vus&r; 

^n access demand unit to request an execution 
of the adt\c^p^ed access content by sending the access 
content a3\ort^—With an attribute of the user; and 

n access execution unit to execute the 
requested access content in a range that matches the 
user attribute sent together with the access content. 
6 . fc A computer-readable recording medium, which 

ecoAds a program for making a computer function as an 
access\ control system that controls an execution of an 
access Vzontent accepted from a user, the program 
recorded\ in the medium making a computer function as: 

an access request unit to accept an access 
content representing a content of an access requested 
by the user;\ 

an Access demand unit to request an execution 
of the accepted access content by sending the access 
content along wiith an attribute of the user; and 

an access execution unit to execute the 
requested access content in a range that matches the 
user attribute sent\ together with the access content. 



